Privacy Policy

SUMMITORA LLC ("Summitora", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it. By using summitora.online (the "Service"), you agree to this policy.

We collect only the information necessary to provide the Service:

• Account data: your name and email address when you register
• Uploaded images: portrait photos you submit for enhancement — processed and deleted within 60 minutes
• Payment data: handled exclusively by our third-party processors (PayPal and authorized partners); we never receive or store your card number
• Usage data: enhancement count, plan type, and session metadata for service operation and abuse prevention
• Technical data: browser type, IP address, and device information collected automatically via standard server logs

Your information is used to:

• Create and manage your account and subscription
• Process and return your enhanced images
• Send transactional emails (receipts, refund confirmations, account alerts)
• Enforce our Terms of Service and prevent fraud or abuse
• Improve the reliability and performance of the Service

We do not sell, rent, or share your personal data with any third party for marketing purposes.

Uploaded images are processed in real-time using our AI enhancement pipeline and permanently deleted from our servers within 60 minutes of the request being completed. We do not use your uploaded images — or the enhanced outputs — to train, fine-tune, or improve any AI model. Your images are never shared with third parties.

Account data (name, email, subscription status) is retained for as long as your account is active. Enhancement history metadata (filename, timestamp, resolution) is retained for up to 12 months for service support purposes. You may request deletion of your account and all associated data at any time.

We use the following third-party services to operate the platform:

• Supabase — database and authentication infrastructure (SOC 2 compliant)
• PayPal / authorized payment processors — payment collection (PCI DSS compliant)
• Vercel — hosting and CDN infrastructure

Each processor operates under its own privacy policy and data processing agreements. We do not authorize any processor to use your data for their own purposes.

All data transmitted between your browser and our servers is encrypted using TLS 1.3. Account passwords are hashed using industry-standard algorithms and are never stored in plaintext. Payment card data is handled exclusively by PCI-compliant processors — SUMMITORA LLC never accesses it.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your account and associated data
• Object to or restrict processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at contact@summitora.online. We will respond within 30 days.

We use essential cookies for authentication and session management. We may use analytics cookies to understand aggregate usage patterns using privacy-focused tools that do not track individuals across sites. For full details, see our Cookie Policy.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the platform before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions or data requests, contact: